IT Security Consultant

MSA Murex S.A.S.; Paris; On-site; EUR 70,000 - 110,000; Full time

Job summary

Murex is a global fintech leader in trading, risk management and processing solutions for capital markets. The Information Security team focuses on turning governance, risk and compliance into practical security outcomes for business and technology teams.

You will help define and monitor Murex's governance framework, drive evidence-based remediation, and build dashboards for senior management. You will collaborate with IT, Legal, Procurement and product teams to embed security requirements into

Qualifications

• 5–7 years of information security experience with governance, risk, compliance, audit or advisory activities.
• Ability to translate security concepts into measurable, actionable requirements.
• Strong communication and stakeholder collaboration skills.

Responsibilities

• Shape and continuously improve Murex's information security governance framework.
• Translate policies, standards and control requirements into actionable practices.
• Define evidence expectations and track remediation progress.
• Design scalable security operating procedures and dashboards.
• Lead or coordinate security assessments, audits and remediation follow-up.
• Support Third-Party Risk Management with supplier assessments and remediation actions.
• Contribute to AI governance by reviewing use cases and monitoring risks.
• Act as a trusted security advisor to business and IT teams.

Skills

Governance

Risk management

Compliance

Audit

Security awareness

Education

CISSP/CRISC/CISM

ISO 27001 Lead Implementer/Lead Auditor

Tools

GRC tools

Security dashboards

Job description

Murex is a global fintech leader in trading, risk management and processing solutions for capital markets.

Operating from our 19 offices, 3 400 Murexians from over 65 different nationalities ensure the development, implementation and support of our platform which is used by banks, asset managers, corporations and utilities, across the world.

Join Murex and work on the challenges of an industry at the forefront of innovation and thrive in a people-centric environment.

You’ll be part of one global team where you can learn fast and stay true to yourself.

Team Join Murex's Information Security team

In this role, you will turn governance, risk and compliance into practical security outcomes: clear requirements, measurable controls, effective remediation plans and trusted guidance for business and technology teams.

Your role Support the definition, implementation and monitoring of Murex's information security governance framework, with a focus on compliance, risk follow-up, control effectiveness, third-party security, and security awareness.

Your main mission will be: Shape and continuously improve Murex's information security governance framework, translating policies, standards and control requirements into actionable practices for global teams.

Drive compliance monitoring by defining evidence expectations, tracking remediation progress and ensuring security requirements are consistently understood and applied.

Design and improve operating procedures that make control execution, compliance monitoring, security reporting and posture management scalable and reliable.

Lead or coordinate security assessments, maturity reviews, audit preparation, compliance checks and follow-up of identified gaps across business, IT and security stakeholders.

Build meaningful security and compliance dashboards that give management a clear view of risks, maturity, control effectiveness and remediation priorities.

Contribute to Third‑Party Risk Management by reviewing supplier assessments, supporting procurement activities and following up on remediation actions with vendors and internal owners.

Support AI governance initiatives by helping define practical security guardrails, reviewing AI use cases and monitoring risks linked to AI tools, services and autonomous capabilities.

Act as a trusted security advisor for business and IT teams by qualifying requests, documenting risk‑based recommendations and ensuring timely follow‑up.

Partner with IT, Legal, Procurement, Product and business stakeholders to embed security requirements into projects, operations, exceptions and continuous improvement plans.

Support internal and external audits, client security questionnaires and compliance assessments with clear answers, relevant evidence and sustainable remediation plans.

Promote a strong security culture through targeted awareness initiatives, practical guidance, communication material and training content adapted to different audiences.

What we are looking for

You have 5 to 7 years of experience in information security, with exposure to governance, risk management, compliance, audit, security awareness, advisory or control monitoring activities.

You enjoy making security requirements understandable, measurable and actionable for diverse stakeholders.

Your strengths

Strong understanding of information security governance, risk and compliance frameworks, with the ability to turn them into pragmatic operational requirements.

Hands‑on experience designing and improving security procedures, compliance workflows, control guidance and evidence collection practices.

Experience performing or coordinating security assessments, control testing, audit preparation and remediation follow‑up.

Ability to structure complex topics, connect technical and business perspectives, and help stakeholders make informed risk‑based decisions.

Excellent written and verbal communication skills, with the ability to produce clear procedures, assessment outcomes, remediation plans and management‑level reporting.

Good knowledge of key security domains such as vulnerability management, incident response, identity and access management, third‑party security and control monitoring.

Exposure to Third‑Party Risk Management, including supplier assessments, security requirements, remediation tracking and collaboration with Procurement or vendor owners.

Interest in AI governance topics, including AI‑related risk assessment, acceptable use, security guardrails and collaboration with Legal, IT, Procurement or business teams.

Structured mindset for handling security requests and exceptions with traceability, prioritization, clear communication and timely follow‑up.

Collaborative attitude, curiosity and the ability to build trusted relationships while promoting security as a business and technology enabler.

Relevant certifications such as CISSP, CRISC, CISM, ISO 27001 Lead Implementer or Lead Auditor would be appreciated.

Murex is a global fintech leader in trading, risk management and processing solutions for capital markets.

Operating from our 19 offices, 3 400 Murexians from over 65 different nationalities ensure the development, implementation and support of our platform which is used by banks, asset managers, corporations and utilities, across the world.

Join Murex and work on the challenges of an industry at the forefront of innovation and thrive in a people-centric environment.

You’ll be part of one global team where you can learn fast and stay true to yourself.